Radish alpha
H
rad:z3QDZAW2FAfuLvihrhiyDC9fAD8G9
HardenedBSD Package Manager
Radicle
Git
Do not drop privileged in sandbox_call (one of the 2 kind of sandboxes) as it prevents locking on NFS
Baptiste Daroussin committed 9 years ago
commit 0822f24af0775cf43dd3d352f00bffdf00b7bd29
parent 25ec020
1 file changed +0 -2
modified src/event.c
@@ -260,8 +260,6 @@ event_sandboxed_call(pkg_sandbox_cb func, int fd, void *ud)
		return (ret);
	}

-
	drop_privileges();
-

	rl_zero.rlim_cur = rl_zero.rlim_max = 0;
	if (setrlimit(RLIMIT_NPROC, &rl_zero) == -1)
		err(EXIT_FAILURE, "Unable to setrlimit(RLIMIT_NPROC)");